Police Cyber Crimes Division
Computer Evidence Chain of Custody
Item Number(s): 10001-FMT-CCD
Case: State vs Peterson
To be completed by initial collector:
Sean Hulbert
Evidence collected by (name): ________________________________________________________________
08-30-2010
Date/Time collected: ________________________________________________________________________
Evidence description:
Seized hard drive from credit card theft case
_________________________________________________________________________________________
_________________________________________________________________________________________
Describe Collection method (include operating system, utility, commands, arguments, etc):
FTK Imager field seizure and imaged , Windows XP , Physical Write blocker used on hard drive
_________________________________________________________________________________________
_________________________________________________________________________________________
What application software/utility is required to view the file?:
FTK Imager or Encase Imager and CSV Viewer
_________________________________________________________________________________________
_________________________________________________________________________________________
Storage location 99 (Police off site impound cold storage)
Where is evidence initially stored?: ____________________________________________________________
Laptop
How is evidence initially secured?: ____________________________________________________________
Collector signature: ________________________________________________ Date: ___________________
Copy History:
Date
Copied By
08-30-2010
Sean Hulbert
Copy Method
FTK Imager
Disposition of original and all copies
Stored and secured
Transfer History:
John Dow
Transferred from (print name, sign & date): ________________________________________________________________________
Carlos Castillo 3-24-15
Transferred...